package org.tigris.scarab.actions;

/* ================================================================
 * Copyright (c) 2000-2002 CollabNet.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are
 * met:
 *
 * 1. Redistributions of source code must retain the above copyright
 * notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 * notice, this list of conditions and the following disclaimer in the
 * documentation and/or other materials provided with the distribution.
 *
 * 3. The end-user documentation included with the redistribution, if
 * any, must include the following acknowlegement: "This product includes
 * software developed by Collab.Net <http://www.Collab.Net/>."
 * Alternately, this acknowlegement may appear in the software itself, if
 * and wherever such third-party acknowlegements normally appear.
 *
 * 4. The hosted project names must not be used to endorse or promote
 * products derived from this software without prior written
 * permission. For written permission, please contact info@collab.net.
 *
 * 5. Products derived from this software may not use the "Tigris" or
 * "Scarab" names nor may "Tigris" or "Scarab" appear in their names without
 * prior written permission of Collab.Net.
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL COLLAB.NET OR ITS CONTRIBUTORS BE LIABLE FOR ANY
 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
 * GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
 * IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 * ====================================================================
 *
 * This software consists of voluntary contributions made by many
 * individuals on behalf of Collab.Net.
 */

// Turbine Stuff
import org.apache.turbine.TemplateContext;
import org.apache.turbine.RunData;

import org.apache.fulcrum.security.TurbineSecurity;
import org.apache.turbine.tool.IntakeTool;
import org.apache.fulcrum.intake.model.Group;
import org.apache.fulcrum.security.util.PasswordMismatchException;

// Scarab Stuff
import org.tigris.scarab.om.ScarabUser;
import org.tigris.scarab.util.ScarabConstants;
import org.tigris.scarab.actions.base.ScarabTemplateAction;
import org.tigris.scarab.tools.ScarabRequestTool;
import org.tigris.scarab.tools.ScarabLocalizationTool;
import org.tigris.scarab.tools.localization.L10NKeySet;

/**
 * This class is responsible for dealing with the Change Password
 * Action.
 *
 * @author <a href="mailto:kevin.minshull@bitonic.com">Kevin Minshull</a>
 * @author <a href="mailto:mpoeschl@marmot.at">Martin Poeschl</a>
 */
public class ChangePassword extends ScarabTemplateAction
{
    /**
     * This manages clicking the Change Password button
     */
    public void doChangepassword(RunData data, TemplateContext context)
        throws Exception
    {
        ScarabRequestTool scarabR = getScarabRequestTool(context);
        ScarabLocalizationTool l10n = getLocalizationTool(context);
        String template = getCurrentTemplate(data, null);
        IntakeTool intake = getIntakeTool(context);
        if (intake.isAllValid())
        {
            Object user = data
                .getUser()
                .getTemp(ScarabConstants.SESSION_REGISTER);
            Group register = null;
            if (user != null && user instanceof ScarabUser)
            {
                register = intake.get("Register",
                                 ((ScarabUser)user).getQueryKey(), false);
            }
            else
            {
                register = intake.get("Register",
                                 IntakeTool.DEFAULT_KEY, false);
            }
            
            String username = data.getParameters().getString("username");
            String oldPassword = register.get("OldPassword").toString();
            String password = register.get("Password").toString();
            String passwordConfirm = register.get("PasswordConfirm").toString();
            
            if (oldPassword.equals(password))
            {
                scarabR.setInfoMessage(L10NKeySet.PasswordSame);
                setTarget(data, template);
            } 
            else if (password.equals(passwordConfirm))
            {
                try
                {
                    ScarabUser confirmedUser = (ScarabUser)
                        TurbineSecurity.getUser(username);

                    // first we need to save the user out
                    confirmedUser.setPasswordExpire();
                    confirmedUser.setHasLoggedIn(Boolean.FALSE);
                    data.setUser(confirmedUser);
                    data.save();

                    // then change the password of that user
                    TurbineSecurity.changePassword(confirmedUser, 
                        oldPassword, password);

                    scarabR.setConfirmMessage(L10NKeySet.PasswordChanged);
                    
                    // Remove NEXT_TEMPLATE, so we will start again from home after login
                    data.getParameters().remove(ScarabConstants.NEXT_TEMPLATE);
                    setTarget(data, "Login.vm");
                }
                catch (PasswordMismatchException pme)
                {
                    scarabR.setAlertMessage(l10n.getMessage(pme));
                    setTarget(data, template);
                }
            }
            else /* !password.equals(passwordConfirm) */
            {
                scarabR.setAlertMessage(L10NKeySet.PasswordsDoNotMatch);
                setTarget(data, template);
            }
        }
        else
        {
            scarabR.setAlertMessage("Failed to process form input.");
            setTarget(data, template);
        }
    }
}
